v0.0.1

Install

lite-sandbox update            # already installed: switch to this release

Or download the archive for your platform below, verify it against
checksums.txt, and put the lite-sandbox binary on your PATH. Then run
lite-sandbox install (a first install) or restart your agent (an upgrade).

What's Changed

• Add deno runtime integration with sandbox-aware permissions by @gartnera in #2
• fix(sandbox): prevent executeRaw hang and speed up path validation by @gartnera in #3
• perf: stop re-running runtime detection and git forks on hot paths by @gartnera in #4
• Allow kill/pkill when the OS sandbox is enabled by @gartnera in #5
• Add background process support for long-running commands by @gartnera in #6
• Add platform-specific test gates and OS sandbox test guards by @gartnera in #7
• Add Docker daemon proxy with policy enforcement by @gartnera in #8
• Reorganize documentation into separate topic-focused files by @gartnera in #9
• Fix process cleanup on macOS by enumerating process tree by @gartnera in #10
• fix(imds): delegate credential caching to SDK to fix refresh hang by @gartnera in #11
• feat(aws): allow per-directory AWS profile overrides by @gartnera in #12
• Add OpenAI Codex CLI installation support by @gartnera in #13
• Unify path validation, implement IMDS hot reload, refresh CLAUDE.md by @gartnera in #14
• Run bare extra_commands inside the OS sandbox worker when enabled by @gartnera in #15
• Fix e2e tests for current Claude CLI/SDK versions by @gartnera in #16
• feat(codex): auto-approve lite-sandbox MCP tools on install by @gartnera in #17
• Allow tee and colon (:) commands by @gartnera in #18
• feat(docker): add allow_host_namespaces to permit host pid/net/ipc by @gartnera in #20
• feat(config): add unsandboxed_commands to bypass the OS sandbox by @gartnera in #21
• Add opencode support and autodetect installed agent CLIs on install by @gartnera in #19
• fix(os-sandbox): honor writable_paths and worktree parent in worker profile by @gartnera in #22
• Fix grep -f path-validation bypass allowing arbitrary file reads by @gartnera in #23
• fix(os-sandbox): emit bwrap credential masks after all binds by @gartnera in #24
• Close env/timeout command-whitelist bypass with recursive validators by @gartnera in #25
• Fix writable_paths read gap between bash tool and PreToolUse hook by @gartnera in #26
• Add Flutter/Dart/fvm runtime with automatic path detection by @gartnera in #27
• Add uv (Python) runtime integration by @gartnera in #28
• Wait for background tasks to tear down on MCP shutdown by @gartnera in #29
• Add internal_{readable,writable}_paths for OS-sandbox-only access by @gartnera in #30
• Bind pnpm cache dir into the OS sandbox and version the runtime-paths cache by @gartnera in #31
• Pre-approve the sandbox's own MCP tools in the PreToolUse hook by @gartnera in #32
• Route unsandboxed_commands through timeout/env/xargs wrappers by @gartnera in #33
• Count functions declared in nested scripts as allowed commands by @gartnera in #34
• Allow slash-spanning image names in docker proxy allowlist by @gartnera in #35
• Validate dynamic command names at runtime by @gartnera in #36
• Allowlist cygpath so npm cmd-shim launchers validate by @gartnera in #37
• Auto-allow Claude Code scratchpad writes by @gartnera in #38
• Inject brokered profile region in IMDS mode by @gartnera in #39
• Support multiple brokered AWS profiles via allowed_profiles by @gartnera in #40
• Add config aws allowed-profiles CLI command by @gartnera in #41
• Generalize per-directory config overrides to all sections by @gartnera in #42
• Apply /simplify findings and update mvdan.cc/sh to v3.14 by @gartnera in #43
• Reject redundant leading cd into the working directory by @gartnera in #44
• Add --always-load flag to Claude installer by @gartnera in #45
• Extend --always-load to the Codex installer by @gartnera in #46
• Allow per-user system temp dir; drop stale fallback note by @gartnera in #47
• Edit opencode.jsonc in place, preserving comments by @gartnera in #48
• Add Crush integration to lite-sandbox install by @gartnera in #49
• Speed up CI setup steps by @gartnera in #50
• Use the runner's preinstalled Go toolchain in CI by @gartnera in #51
• Add mocked server e2e tests driving Crush, Codex, and Claude Code by @gartnera in #52
• Add self-update and release automation by @gartnera in #53

New Contributors

• @gartnera made their first contribution in #2

Full Changelog: https://github.com/gartnera/lite-sandbox/commits/v0.0.1